D(OU)BT Maxim: If you think Design Basis Threat (DBT) is something to test your security against, then you don’t understand DBT and you don’t understand your security application.
Comment: If done properly—which it often is not—DBT is for purposes of allocating security resources based on probabilistic analyses, not judging security effectiveness. Moreover, if the threat probabilities in the DBT analysis are all essentially 1, the analysis is deeply flawed. Compiled by Roger G. Johnston, Ph.D., CPP, Argonne National Laboratory.